Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2025-24127: Apple devices may quit apps when opening some files
CVE-2025-24127 · published 1 year ago
Summary
A problem in iOS, iPadOS, macOS, tvOS and visionOS can cause an app to close unexpectedly when it tries to read certain files. This affects devices running versions prior to iOS 18.3, iPadOS 18.3 (or 17.7.4), macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, tvOS 18.3, and visionOS 2.3. Install the latest software updates for your Apple device to fix the issue.
What to do
- Update apple iphone_os to version 18.3 or later.
- Update apple tvos to version 18.3 or later.
- Update apple visionos to version 2.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 17.7.4 >= 18.0, < 18.3 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 18.3 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 13.7.3 >= 14.0, < 14.7.3 >= 15.0, < 15.3 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | tvos |
< 18.3 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | visionos |
< 2.3 cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3....
The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3. Parsing a file may lead to an unexpected app termination.
References
- https://support.apple.com/en-us/122066 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122067 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122068 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122069 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122070 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122072 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122073 Release Notes Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/12
- http://seclists.org/fulldisclosure/2025/Jan/14
- http://seclists.org/fulldisclosure/2025/Jan/15
- http://seclists.org/fulldisclosure/2025/Jan/16
- http://seclists.org/fulldisclosure/2025/Jan/17
- http://seclists.org/fulldisclosure/2025/Jan/19
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published27 Jan 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-24127 · NVD
Track software like this
Free during beta